RHSA-2022:5070MediumCVSS 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.11.0 extras and security update

Published
August 10, 2022
Last Modified
August 4, 2026

🔗 CVE IDs covered (3)

CVE-2021-38561 →CVE-2022-21698 →CVE-2022-24778 →

📋 Description

CVE-2021-38561 — golang: out-of-bounds read in golang.org/x/text/language leads to DoS CVE-2022-21698 — prometheus/client_golang: Denial of service using InstrumentHandlerCounter CVE-2022-24778 — imgcrypt: Unauthorized access to encryted container image on a shared system due to missing check in CheckAuthorization() code path

🎯 Affected products166

  • Red Hat OpenShift Container Platform 4.11
  • openshift-tech-preview/metallb-rhel8@sha256:08ecc186deede0fda1e705a675121579e3c4c3e1869d782263a9e3fd1633d371_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift-tech-preview/metallb-rhel8@sha256:a78134e49fe61b636440fabe2a27f48702b0f0a24d9f6b53873bf0b76978b4d4_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift-tech-preview/metallb-rhel8@sha256:bb37eb2b209745e6001630c9e4a70dd98c1c9c253f3e30797f40a64b8fb3eec3_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift-tech-preview/metallb-rhel8@sha256:bea2780e93c398b9337db5c53cbfcc92d540a4eaa9aa4d34a242964fe70d927a_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/cloud-event-proxy-rhel8@sha256:32fa46f2ec1596a91304dbb6a3135b5746c61e46c40b5ec80f4ddb9097b90c7b_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/cloud-event-proxy-rhel8@sha256:3d90118071c2695aa4508a924d0a0fd48abc1fdadc48c319920b982d92fdde28_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/cloud-event-proxy-rhel8@sha256:d7b029799dfcbe813dab0bbadd29efd414ca69da40dad8f9f0c03762280ce26f_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/dpu-network-rhel8-operator@sha256:397d38141ea46502eb974cb825146a4e5b6a9574e5d93db3bd9c80ef60626f96_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/dpu-network-rhel8-operator@sha256:ae209ba2f3024bbd433180eee2bf0cc938c224dfbda0a50b9b9bb94bd2f3d5ac_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/kubernetes-nmstate-rhel8-operator@sha256:1a6b9b610dc61cf5c3b2451966192cc2ea17ccfe1ee70ed7f701fdc720a0052e_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/kubernetes-nmstate-rhel8-operator@sha256:9d15ddb67dc669b97aae03fffd20b998975e8e9948703d42503c8a7a312678b3_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/kubernetes-nmstate-rhel8-operator@sha256:b3aa517dcac9344864d6aa24399cf8ee28a1dab733aa2ce7fab73c9ed6bccb49_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/kubernetes-nmstate-rhel8-operator@sha256:c2588919d42a61931977c7aee6096473549dfcbde8d82e88af2fa0b1fdb38ab0_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/metallb-rhel8-operator@sha256:43d375f5281a9ba701173f7d3e07f386f306c04d46157ddbdd4e16c7bca5dff4_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/metallb-rhel8-operator@sha256:8a58262ffcad254fe46d3568e2a31141db30583f60397aa49fbe36ae54a5cb71_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/metallb-rhel8-operator@sha256:8f7f559da97b75de5a1f9964c0b5f1011bf626a0ab3e2325b2d8458e763a0a9f_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/metallb-rhel8-operator@sha256:ea5bf8e3ba818236ad767bdf7edb791787d19f47bdbc6850633156180b7d8dce_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/metallb-rhel8@sha256:08ecc186deede0fda1e705a675121579e3c4c3e1869d782263a9e3fd1633d371_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/metallb-rhel8@sha256:a78134e49fe61b636440fabe2a27f48702b0f0a24d9f6b53873bf0b76978b4d4_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/metallb-rhel8@sha256:bb37eb2b209745e6001630c9e4a70dd98c1c9c253f3e30797f40a64b8fb3eec3_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/metallb-rhel8@sha256:bea2780e93c398b9337db5c53cbfcc92d540a4eaa9aa4d34a242964fe70d927a_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-ansible-operator@sha256:66d9c1e00551918d80f4963e7c89a1d4ed1190c94f50357bba15cf384bc09447_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-ansible-operator@sha256:6f0cafeba260b9e49a8d457fac22b1303b24b57669a06098b2247832a8c0373b_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-ansible-operator@sha256:8626c9ba20c91f37bd6c646bd2de92a6e4d19b954eeb0e4619d5c0473d55ae51_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-ansible-operator@sha256:d85ba2258155fc4d5947489d0a182ae855bffb50aca67a055622def03120cc2f_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:774c1f7a274d0220c2fb3aa4007ff9ba50d32160b4b58c88b0558af8e8ef2d13_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:d2726e422d0f6a609b4ab2fdc4f6d53f54eb3f82e7004ccc717d03598726dd2e_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:219094bbafebf46c815d46c38bae446b432421ae7a8d0468a82c0b52034743bc_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:2eb883375a5a6df71731147764575c3752f0aff3e9ed5f5ec219272d532c71c0_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • +136 more not shown

✅ Remediation

For OpenShift Container Platform 4.11 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.11/release_notes/ocp-4-11-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.11/updating/updating-cluster-cli.html

🔗 References (24)